Keith Irwin Ting Yu William H. Winsborough On the modeling and analysis of obligations. 134-143 2006 conf/ccs/2006usa ACM Conference on Computer and Communications Security http://doi.acm.org/10.1145/1180405.1180423 db/conf/ccs/ccs2006usa.html#IrwinYW06